Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/dbfe1hGo2Bb1HS_ONYlWporIZvY.roa
File:                     dbfe1hGo2Bb1HS_ONYlWporIZvY.roa (raw, json)
Hash identifier:          Q5uR2ndPtLv7370s31GW1bT8XRlwW0Lp8lsYhIKl5vA=
Subject key identifier:   75:B7:DE:D6:11:A8:D8:16:F5:1D:2F:CE:35:89:56:A6:8A:C8:66:F6
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       29
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/dbfe1hGo2Bb1HS_ONYlWporIZvY.roa
Signing time:             Tue 30 Apr 2024 01:31:47 +0000
ROA not before:           Tue 30 Apr 2024 01:31:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     17958
IP address blocks:        219.103.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Apr 30 01:31:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=75B7DED611A8D816F51D2FCE358956A68AC866F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:21:5a:bc:a3:69:aa:cd:57:5d:1a:21:0a:
                    8e:e8:87:60:5d:4e:80:71:00:47:9c:b3:c8:cf:3a:
                    05:90:c2:d7:e8:c4:f2:a7:28:00:af:f7:fb:b6:20:
                    92:ca:4a:cb:55:83:7c:74:cf:f8:ec:fe:e8:0e:f3:
                    50:fd:22:f8:73:5a:94:2e:49:1f:be:9a:90:3c:85:
                    29:bd:39:52:49:d4:21:1b:92:43:82:1c:33:82:49:
                    cd:59:14:56:b5:96:50:b4:03:6e:20:0b:18:2f:1a:
                    2d:88:d5:38:be:03:08:7e:9c:ca:e8:8d:1e:db:4b:
                    ef:28:54:eb:a0:e8:94:3b:22:bf:67:4f:37:87:39:
                    4a:3c:33:18:ef:a5:1d:6c:ae:75:f0:8c:9a:32:8f:
                    89:5a:ee:df:6a:e7:f8:db:34:1d:be:d9:f5:80:95:
                    19:04:4f:99:90:bb:73:1c:c8:1b:f9:a8:e0:18:cb:
                    82:13:cb:89:c9:23:ce:40:cd:02:81:c9:7a:e0:20:
                    c3:af:55:fb:3c:8f:70:56:2b:13:5b:ad:47:9d:74:
                    9a:ad:1c:bb:26:ba:7f:c4:54:6a:c2:86:a0:c7:73:
                    84:0f:1b:1d:72:e4:ed:38:74:57:f4:9b:3b:48:68:
                    be:67:60:89:a5:b5:13:44:17:49:41:d1:1a:b4:34:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B7:DE:D6:11:A8:D8:16:F5:1D:2F:CE:35:89:56:A6:8A:C8:66:F6
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/dbfe1hGo2Bb1HS_ONYlWporIZvY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.103.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:e2:68:39:6a:df:31:16:9c:34:07:bc:51:70:5f:4f:12:
         79:70:47:45:88:46:0e:49:4e:05:27:37:ec:49:e1:bb:58:e9:
         40:d5:c8:aa:af:4f:c1:db:78:5d:06:ca:78:31:a3:67:30:62:
         df:30:ad:cc:fa:d4:21:30:40:b6:dc:d9:a1:89:c1:45:34:ae:
         ba:dd:2b:d1:8a:2e:63:cc:e2:65:12:0b:61:22:14:f2:30:18:
         1d:f1:a3:25:7f:6b:30:ef:90:6e:51:c9:9d:dc:bd:2b:a5:89:
         4b:46:65:6c:23:ce:19:9b:78:b5:73:0c:5e:1a:c7:3a:29:51:
         96:98:a4:6a:fe:0a:e1:1e:b4:df:17:89:79:05:bb:d8:7f:fe:
         7f:3a:52:43:b7:39:82:11:bb:18:5d:0a:38:91:59:3c:9a:ba:
         2d:8e:59:0f:5a:12:cd:11:4c:bc:4a:cc:cb:fa:3e:9d:62:8f:
         cc:5f:01:ad:8f:84:4b:37:61:94:df:39:ea:ac:cf:57:db:42:
         60:a1:e2:83:7e:8c:91:39:19:b0:34:b7:1b:af:51:93:85:b8:
         a3:23:d6:0d:ed:e2:c9:56:91:c6:23:f7:d0:4b:26:69:96:47:
         e9:45:fd:9e:fa:a1:75:9c:f5:ac:9a:31:cc:df:72:f5:cd:db:
         33:0c:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org